cbcvebase.

Tenda M3 Firmware vulnerabilities

45 known vulnerabilities affecting tenda/m3_firmware.

Total CVEs
45
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL19HIGH26

Vulnerabilities

Page 2 of 3
CVE-2022-27081P2CRITICALCVSS 9.8v1.0.0.12\(4856\)2022-03-24
CVE-2022-27081 [CRITICAL] CWE-77 CVE-2022-27081: Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the co Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/SetLanInfo.
nvd
CVE-2022-27076P2CRITICALCVSS 9.8v1.0.0.12\(4856\)2022-03-24
CVE-2022-27076 [CRITICAL] CWE-77 CVE-2022-27076: Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the co Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/delAd.
nvd
CVE-2022-26536P2CRITICALCVSS 9.8v1.0.0.12\(4856\)2022-03-24
CVE-2022-26536 [CRITICAL] CWE-77 CVE-2022-26536: Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the co Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setFixTools.
nvd
CVE-2023-51093P3CRITICALCVSS 9.8v1.0.0.12\(4856\)2023-12-26
CVE-2023-51093 [CRITICAL] CWE-787 CVE-2023-51093: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function fromSetLocalVla Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function fromSetLocalVlanInfo.
nvd
CVE-2023-51095P3CRITICALCVSS 9.8v1.0.0.12\(4856\)2023-12-26
CVE-2023-51095 [CRITICAL] CWE-787 CVE-2023-51095: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPoli Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formDelWlRfPolicy.
nvd
CVE-2023-51090P3CRITICALCVSS 9.8v1.0.0.12\(4856\)2023-12-26
CVE-2023-51090 [CRITICAL] CWE-787 CVE-2023-51090: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formGetWeiXinCo Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow via the function formGetWeiXinConfig.
nvd
CVE-2023-51094P3CRITICALCVSS 9.8v1.0.0.12\(4856\)2023-12-26
CVE-2023-51094 [CRITICAL] CWE-78 CVE-2023-51094: Tenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution vulnerability via the functio Tenda M3 V1.0.0.12(4856) was discovered to contain a Command Execution vulnerability via the function TendaTelnet.
nvd
CVE-2022-32035P3HIGHCVSS 7.5v1.0.0.122022-07-01
CVE-2022-32035 [HIGH] CWE-787 CVE-2022-32035: Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formMasterMng. Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formMasterMng.
nvd
CVE-2022-32034P3HIGHCVSS 7.5v1.0.0.122022-07-01
CVE-2022-32034 [HIGH] CWE-787 CVE-2022-32034: Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the items parameter in the functio Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the items parameter in the function formdelMasteraclist.
nvd
CVE-2022-32039P3HIGHCVSS 7.5v1.0.0.122022-07-01
CVE-2022-32039 [HIGH] CWE-787 CVE-2022-32039: Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the listN parameter in the functio Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the listN parameter in the function fromDhcpListClient.
nvd
CVE-2022-32036P3HIGHCVSS 7.5v1.0.0.122022-07-01
CVE-2022-32036 [HIGH] CWE-787 CVE-2022-32036: Tenda M3 V1.0.0.12 was discovered to contain multiple stack overflow vulnerabilities via the ssidLis Tenda M3 V1.0.0.12 was discovered to contain multiple stack overflow vulnerabilities via the ssidList, storeName, and trademark parameters in the function formSetStoreWeb.
nvd
CVE-2022-32040P3HIGHCVSS 7.5v1.0.0.122022-07-01
CVE-2022-32040 [HIGH] CWE-787 CVE-2022-32040: Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetCfm. Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetCfm.
nvd
CVE-2022-32041P3HIGHCVSS 7.5v1.0.0.122022-07-01
CVE-2022-32041 [HIGH] CWE-787 CVE-2022-32041: Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formGetPassengerAnaly Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formGetPassengerAnalyseData.
nvd
CVE-2022-32043P3HIGHCVSS 7.5v1.0.0.122022-07-01
CVE-2022-32043 [HIGH] CWE-787 CVE-2022-32043: Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAccessCodeInfo Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAccessCodeInfo.
nvd
CVE-2022-32037P3HIGHCVSS 7.5v1.0.0.122022-07-01
CVE-2022-32037 [HIGH] CWE-787 CVE-2022-32037: Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg. Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg.
nvd
CVE-2022-38569P3HIGHCVSS 7.5v1.0.0.12\(4856\)2022-08-28
CVE-2022-38569 [HIGH] CWE-787 CVE-2022-38569: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelAd. Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelAd.
nvd
CVE-2022-38567P3HIGHCVSS 7.5v1.0.0.12\(4856\)2022-08-28
CVE-2022-38567 [HIGH] CWE-787 CVE-2022-38567: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vulnerability in the function fo Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vulnerability in the function formSetAdConfigInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the authIPs parameter.
nvd
CVE-2022-38570P3HIGHCVSS 7.5v1.0.0.12\(4856\)2022-08-28
CVE-2022-38570 [HIGH] CWE-787 CVE-2022-38570: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelPushedAd. Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow in the function formDelPushedAd. This vulnerability allows attackers to cause a Denial of Service (DoS) via the adPushUID parameter.
nvd
CVE-2022-38564P3HIGHCVSS 7.5v1.0.0.12\(4856\)2022-08-28
CVE-2022-38564 [HIGH] CWE-787 CVE-2022-38564: Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow vulnerability in the function f Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow vulnerability in the function formSetPicListItem. This vulnerability allows attackers to cause a Denial of Service (DoS) via the adItemUID parameter.
nvd
CVE-2022-38571P3HIGHCVSS 7.5v1.0.0.12\(4856\)2022-08-28
CVE-2022-38571 [HIGH] CWE-787 CVE-2022-38571: Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow in the function formSetGuideLis Tenda M3 V1.0.0.12(4856) was discovered to contain a buffer overflow in the function formSetGuideListItem.
nvd
← Previous2 / 3Next →